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Claims 




What is claimed is: 

1 & method for facilitating integrity of an assembly employable by application 
programs duringVuntime, comprising the steps of: 

providing an assembly with a manifest that contains a list of modules that 

make up the assembly; and 

providing\he manifest with a hash of the contents of at least one module of 
the list of modules. 

2. The method of claik 1 , the step of providing the manifest with a hash of the 
contents of at least one module of theW of modules comprising the step of providing the 
manifest with a hash of each module of\e list of modules that constitutes the assembly. 

3. The method of claim 1, furthe\omprising the step of providing identity 
information in the manifest of the assembly. 

4. The method of claim 3, the identity intimation comprising publisher 
information and version information. 

5. The method of claim 1, further comprising the\tep of providing a hash of the 
contents of the assembly at the end of the assembly. 

6. The method of claim 1 , further comprising the step of>determining if the 
contents of the assembly has been modified by determining an actual haW the contents of 
the at least one module of the list of modules and comparing the actual ha^h the hash of 
the contents of the at least one module of the list of modules residing in the manifest of the 
assembly. 
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/° 7. Tfoe method of claim 6, further comprising the step of determining if the 
(publisher of thelsembly is trustworthy if the assembly has been modified. 

8. The nWhod of claim 7, the step of determining if the publisher of the 
assembly is tmstworthV the assembly has been modified comprising the step of checking 
version information and publisher name information residing in the manifest of the assembly. 

9. The method oWm 1 , further comprising the step of providing the manifest 
with a hash of a manifest of atW one other assembly that the assembly depends on. 

10. A method for facilitating integrity of assemblies employable by application 
programs during runtime, comprisingVie steps of: 

providing an assembly wtth a manifest that contains a list of referenced 
assemblies that the assembly depends on; and 

providing the manifest with a\ash of a manifest of at least one referenced 
assembly of the list of referenced asseinblies. 

11. The method of claim 1 0, the step ofproviding the manifest with a hash of a 
manifest of at least one referenced assemblyof the lislof referenced assemblies comprising 
the steps ofproviding the manifest with a hash of eachVferenced assembly of the list of 
referenced assemblies. 

12. The method of claim 10, further comprising \ step of providing identity 
information in the manifest of the assembly. 

13. The method of claim 12, the identity information corhr^rising publisher 
information and version information. 
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14. the method of claim 10, further comprising the step of providing a hash of the 
contents of the assembly at the end of the assembly. 

1 5 The method of claim 10, further comprising the step of determining if the 
contents of the at least \e referenced assembly has been modified by determining an actual 
hash of the contents of At least one referenced assembly of the list of referenced 
assemblies and comparing the actual hash with the hash of the contents of the at least one 
referenced assembly of the lis\f referenced assemblies residing in the manifest of the 
assembly. 

16 The method of claimV s, further comprising the step of determining if the 
publisher of the at least one referenc e \as S embly is trustworthy if the at least one referenced 
assembly has been modified. 

17 The method of claim 16, the\ep of determining if the publisher of the at least 
one referenced assembly is trustworthy if the W one referenced assembly has been 
modified comprising the step of checking versioWormation and publisher name 
information residing in a manifest of the at least oWerenced assembly. 

18. A computer readable medium having aVast one computer executable 
component employable by an application program at runtime comprising; 

an assembly including a manifest that contains a lisW modules that make up the 
assembly and a hash of the contents of at least one assembly V the list of modules. 



19. The computer readable medium of claim 18, the iWfest including a list of at 
least one referenced assembly and a hash of a manifest of the at lea^one referenced 
assembly. 



20. 



The computer readable medium of claim 19, the manifestWuding identity 
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information and version information. 

\21. The computer readable medium of claim 19, the assembly being a dynamically 
linked Horary. 

22. computer readable medium having at least one computer executable 
component employable by an application program at runtime comprising: 

an assembl\ncluding a manifest that contains a list of at least one referenced 
assembly that the assembly references and a hash of the contents of a manifest of the at least 
one referenced assembly^ 

23 . A system for Militating integrity of assemblies employable by application 
programs at runtime, the system\omprising: 

a first component adapted\provide a manifest for an assembly, the manifest having 
a list of modules making up the assembly; and 

a second component adapted to provide the manifest with a hash of at least one 

module of the list of modules. 

24. The system of claim 23, further c>>mprising a third component adapted to 
compare the hash of the at least one module with factual hash value of the at least one 
module. 

25. The system of claim 24, the manifest including identity and version 
information and the third component adapted to determine ifthe assembly should be 
executed based on a review of the originator and version infomWion, ifthe hash of the at 
least one module in the manifest and the actual hash value of the\least one module are 
different. 

26. The system of claim 23, further comprising a binding cornWnt adapted to 
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provide binding policy information for determining a version of an assembly that an 
application program will run if another assembly having the same name resides on the 
system. 

27. \ A system for facilitating integrity of assemblies employable by application 
programs at runtime, the system comprising: 

a first component adapted to provide a manifest for an assembly, the manifest having 

at least one referenced assembly; and 

a second component adapted to provide the manifest with a hash of the at least one 

referenced assembly. 

28. The system of claim 27, further comprising a third component adapted to 
compare the hash of the at least orVeferenced assembly in the manifest with an actual hash 
value of the at least one referenced assembly. 

29. The system of claim 27, further comprising a binding component adapted to 
provide the third component with binding polV information. 

30. A system for facilitating integrity of\n assembly employable by application 
programs at runtime, the system comprising: \ 

means for relating a manifest having a list of at leV one related assembly to an 

assembly; and \ 

means for providing the manifest with a hash of the at le^t one related assembly. 

31. The system of claim 30, the at least one related assembV being a module. 

32. The system of claim 30, the at least one related assembly bei\a referenced 
assembly. x. 
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33. The system of claim 30, further comprising means for comparing a hash value 
of the at least oner^d assembly in the manifest to an actual hash value of the at least one 
related assembly. 

34. The system of claimS£, further comprising means for establishing a binding 

policy. 

35. The system of claim 30, at least rofo^f the assembly and the at least one 
related assembly being a dynamically linked library. 
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